MAL-2025-140230 Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144935 Malicious code in meteor-semantic-release-inquirer-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d1b5167b18e8d059fdc524c027f92ebfb7134ffd5ec7a564dea081c41e2869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142966 Malicious code in google-mensa-meteor-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5f170210e0d8eb08a7942ac60c145b1e1e5c1422ede04ad794da31b30e14df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148236 Malicious code in sqlite-pm2-meteor-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd3c5f43018356c9e82eaca0f0f7ba7363ea55334dba08dfc09a72bdaebb0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144942 Malicious code in meteor-writable-jekyll-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d15e37318d6f6855e5bf85bc9629140d104803933033f155454a427da1008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122668

Malicious code in remark-meteor-slides-kaus npm...

Malicious code in blaze-pegasus-test-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cdf832171db99e5c880b298452be7911f69410161094c6828889a7969b352cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111186

Malicious code in meteor-readable-norma-native npm...

EUVD-2025-111183

Malicious code in meteor-rollup-plugin-io-carina npm...

Malicious code in meteor-writable-jekyll-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d15e37318d6f6855e5bf85bc9629140d104803933033f155454a427da1008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111173

Malicious code in meteor-writable-jekyll-io npm...

MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146224 Malicious code in pino-meteor-mdx-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23a752b5d5e0c701724a1e23f7e6cdf1609eb8fa82395f246c495bffbe4b364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147255 Malicious code in remark-meteor-slides-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb4bd29b5702676310ac558508cd9e3ada75cc965d0b2dc1edaa13c4b45b699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144931 Malicious code in meteor-rigel-ursa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144933 Malicious code in meteor-sagitta-gravity-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828594916d9bd09aaef2618eea6d415ff52167a88339f2a6c5b4706e6f567eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140132 Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112877

Malicious code in helios-impulse-meteor-fomalhaut npm...

EUVD-2025-123237

Malicious code in protractor-event-meteor-ganymede npm...

Malicious code in cross-env-yaml-meteor-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d215441ec813faf80ea353ec77a212352b199912065942b6bb274f8b4c5103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...